Intel Core M5 6Y57 vulnerabilities

26 vulnerabilities

Known vulnerabilities in Intel Core M5 6Y57, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-0156intelatom_c3308+679
EPSS score
0.30%
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
7.8CVE-2021-0099intelatom_c3308+680
EPSS score
0.30%
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
6.6CVE-2021-0124intelatom_c3308+680
EPSS score
0.32%
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
6.7CVE-2021-0118intelatom_c3308+680
EPSS score
0.30%
Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
4.4CVE-2021-0092intelatom_c3308+680
EPSS score
0.25%
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
6.7CVE-2021-0107intelatom_c3308+680
EPSS score
0.30%
Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
7.8CVE-2021-0117intelatom_c3308+680
EPSS score
0.30%
Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
4.4CVE-2021-0093intelatom_c3308+680
EPSS score
0.24%
Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
7.8CVE-2021-0091intelatom_c3308+680
EPSS score
0.32%
Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.
6.7CVE-2021-0103intelatom_c3308+680
EPSS score
0.30%
Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
6.7CVE-2021-0111intelatom_c3308+680
EPSS score
0.30%
NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
6.2CVE-2021-0119intelatom_c3308+680
EPSS score
0.30%
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
7.8CVE-2021-0116intelatom_c3308+680
EPSS score
0.30%
Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
6.7CVE-2021-0115intelatom_c3308+680
EPSS score
0.33%
Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
6.6CVE-2021-0125intelatom_c3308+680
EPSS score
0.30%
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.
5.5CVE-2020-0549canonicalubuntu_linux+433
EPSS score
0.56%
Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
5.5CVE-2020-0548alpineintel-ucode+430
EPSS score
0.52%
Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
5.5CVE-2020-0543alpinexen+710
EPSS score
0.54%
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
5.6CVE-2020-0551ubuntulinux-azure+1324
EPSS score
1.08%
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
5.5CVE-2020-8695debianintel-microcode+302
EPSS score
0.42%
Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.